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storage nodes alleviate the heavy load of transmitting all the data to a central place for 
archiving and reduce the communicatio cost induced by the network query. This paper 
considers the storage node placement problem aiming to minimize the ... 
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Similarity search structures for metric data typically bound object partitions by ball 
regions. Since regions can overlap, a relevant issue is to estimate the proximity of regions 
in order to predict the number of objects in the regions' intersection. This paper analyzes 
the problem using a probabilistic approach and provides a solution that effectively 
computes the proximity through realistic heuristics that only require small amounts of 
auxiliary data. An extensive simulation to validate the t ... 
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We study restricted classes of B-trees, called H(&bgr;, &ggr;, &dgr;) trees. A class is 
defined by three parameters: &bgr;, the size of a node; &ggr;, the minimal number of 
grandsons a node must have; and &dgr;, the minimal number of leaves bottom nodes 
must have. This generalizes the brother condition of 2-3 brother trees in a uniform way to 
B-trees of higher order. The class of B-trees of order m is obtained by choosing &bgr; = 
m, &ggr; = (m/2)2 and &dgr; = m/2. An al ... 
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The computer architecture described here was inspired by Mago's recently proposed 
cellular computer [1979] based on the Formal Functional Programming (FFP) languages 
introduced by Backus [1978]. Mago's machine is a binary tree of many simple 
processor/memory units, called cells. FFP programs are stored, one symbol per cell, in the 
leaf cells ("L" cells) of the machine. The machine fully exploits all the parallelism 
expressed in an FFP program, storage space permitt ... 
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As group-oriented services become the focal point of ad hoc network applications, 
securing the group communications becomes a default requirement. In this paper, we 
address the problem of group access in secure multicast communications for wireless ad 
hoc networks. We argue that energy expenditure is a scarce resource for the energy- 
limited ad hoc network devices and introduce a cross-layer approach for designing 
energy-efficient, balanced key distribution trees to perform key management. To con ... 
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Minimizing the amount of data that must be stored and managed is a key goal for any 
storage architecture that purports to be scalable. One way to achieve this goal is to avoid 
maintaining duplicate copies of the same data. Eliminating redundant data at the source 
by not writing data which has already been stored not only reduces storage overheads, 
but can also improve bandwidth utilization. For these reasons, in the face of today's 
exponentially growing data volumes, redundant data elimination t ... 
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The classical methods for implementing dynamic storage allocation can be summarized 
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Routers classify packets to determine which flow they belong to, and to decide what 
service they should receive. Classification may, in general, be based on an arbitrary 
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number of fields is known to be difficult, and has poor worst-case performance. In this 
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A rich set of concepts and techniques has been developed in the context of query 
processing for the efficient and robust execution of queries. So far, this work has mostly 
focused on issues related to data -retrieval queries, with a strong backing on relational 
algebra. However, update operations can also exhibit a number of query processing 
issues, depending on the complexity of the operations and the volume of data to process. 
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memory. By dynamic it is meant that insertions and deletions are intermixed with queries, 
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collected data need to be archived for future information retrieval. This paper introduces 
storage nodes to store the data collected from the sensors in their proximities. The 
storage nodes alleviate the heavy load of transmitting all the data to a central place for 
archiving and reduce the communicatio cost induced by the network query. This paper 
considers the storage node placement problem aiming to minimize the ... 
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Similarity search structures for metric data typically bound object partitions by ball 
regions. Since regions can overlap, a relevant issue is to estimate the proximity of regions 
in order to predict the number of objects in the regions' intersection. This paper analyzes 
the problem using a probabilistic approach and provides a solution that effectively 
computes the proximity through realistic heuristics that only require small amounts of 
auxiliary data. An extensive simulation to validate the t ... 
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We study restricted classes of B-trees, called H(&bgr;, &ggr;, &dgr;) trees. A class is 
defined by three parameters: &bgr;, the size of a node; &ggr;, the minimal number of 
grandsons a node must have; and &dgr;, the minimal number of leaves bottom nodes 
must have. This generalizes the brother condition of 2-3 brother trees in a uniform way to 
B-trees of higher order. The class of B-trees of order m is obtained by choosing &bgr; = 
m, &ggr; = (m/2)2 and &dgr; = m/2. An al ... 
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The computer architecture described here was inspired by Mago's recently proposed 
cellular computer [1979] based on the Formal Functional Programming (FFP) languages 
introduced by Backus [1978]. Mago's machine is a binary tree of many simple 
processor/memory units, called cells. FFP programs are stored, one symbol per cell, in the 
leaf cells ("L" cells) of the machine. The machine fully exploits all the parallelism 
expressed in an FFP program, storage space permitt ... 
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As group-oriented services become the focal point of ad hoc network applications, 
securing the group communications becomes a default requirement. In this paper, we 
address the problem of group access in secure multicast communications for wireless ad 
hoc networks. We argue that energy expenditure is a scarce resource for the energy- 
limited ad hoc network devices and introduce a cross-layer approach for designing 
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Minimizing the amount of data that must be stored and managed is a key goal for any 
storage architecture that purports to be scalable. One way to achieve this goal is to avoid 
maintaining duplicate copies of the same data. Eliminating redundant data at the source 
by not writing data which has already been stored not only reduces storage overheads, 
but can also improve bandwidth utilization. For these reasons, in the face of today's 
exponentially growing data volumes, redundant data elimination t ... 
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Routers classify packets to determine which flow they belong to, and to decide what 
service they should receive. Classification may, in general, be based on an arbitrary 
number of fields in the packet header. Performing classification quickly on an arbitrary 
number of fields is known to be difficult, and has poor worst-case performance. In this 
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^ terms , review 

It has been recognized for some time that software alone does not provide an adequate 
foundation for building a high-assurance trusted platform. The emergence of industry- 
standard trusted computing technologies promises a revolution in this respect by 
providing roots of trust upon which secure applications can be developed. These 
technologies offer a particularly attractive platform for security in peer-to-peer 
environments. In this paper we propose a trusted computing architecture to enforce ac . 
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Trusted platforms have been proposed as a promising approach to enhance the security of 
general-purpose computing systems. However, for many resource-constrained embedded 
systems, the size and cost overheads of a separate Trusted Platform Module (TPM) chip 
are not acceptable. One alternative is to use a software- based TPM (SW-TPM), which 
implements TPM functions using software that executes in a protected execution domain 
on the embedded processor itself. However, since many embedded systems ... 

Architechture: Towards a n o pen , trusted d ig ital ri g hts management p latform | 
Andrew Cooper, Andrew Martin 

October 2006 Proceedings of the ACM workshop on Digital rights management DRM 
'06 

Publisher: ACM Press 

Full text available: ^5?) pdf(417.51 KB) Additional Information: full citation , abstract , references , index terms 

Trusted computing has received criticism from those who fear it will be used by influential 
market forces to exert power over the software used on consumer platforms. This paper 
describes an open architecture for digital rights management (DRM) enforcement on 
trusted computing platforms that empowers the consumer to select their operating- 
system and applications, including open-source options, without weakening the strength 
of the security functions. A key component in the architecture is a secu ... 

Keywords: DRM, digital rights management, mandatory access controls, trusted 
computing, virtual machines 
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The Trusted Computing Group (TCG) has addressed a new generation of computing 
platforms employing both supplemental hardware and software with the primary goal to 
improve the security and the trustworthiness of future IT systems. The core component of 
the TCG proposal is the Trusted Platform Module (TPM) providing certain cryptographic 
functions. Many vendors currently equip their platforms with a TPM claiming to be TCG 
compliant. However, there is no feasible way for application developers and ... 

Keywords: TPM, compliance, test, trusted computing 
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We present WebPod, a portable system that enables mobile users to use the same 
persistent, personalized web browsing session on any Internet-enabled device. No matter 
what computer is being used, WebPod provides a consistent browsing session, 
maintaining all of a user's plugins, bookmarks, browser web content, open browser 
windows, and browser configuration options and preferences. This is achieved by 
leveraging rapid improvements in capacity, cost, and size of portable storage devices. 
WebPod p ... 
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term s 

Pervasive computing provides an attractive vision for the future of computing. 
Computational power will be available everywhere. Mobile and stationary devices will 
dynamically connect and coordinate to seamlessly help people in accomplishing their 
tasks. For this vision to become a reality, developers must build applications that 
constantly adapt to a highly dynamic computing environment. To make the developers' 
task feasible, we present a system architecture for pervasive computing, called & ... 

Keywords: Asynchronous events, checkpointing, discovery, logic/operation pattern, 
migration, one. world, pervasive computing, structured I/O, tuples, ubiquitous computing 
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We have created Zap, a novel system for transparent migration of legacy and networked 
applications. Zap provides a thin virtualization layer on top of the operating system that 
introduces pods, which are groups of processes that are provided a consistent, virtualized 
view of the system. This decouples processes in pods from dependencies to the host 
operating system and other processes on the system. By integrating Zap virtualization 
with a checkpoint-restart mechanism, Zap can migrate a pod of p ... 
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Friedhelm Meyer auf der Heide, Berthold Vocking, Matthias Westermann 
February 2000 Proceedings of the eleventh annual ACM-SIAM symposium on Discrete 
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Full text available: ^pdf(146.51 KB) Additional Information: full citation, abstract, references 

In recent years we have seen an enormous growth in the size and prevalence of data 
processing workloads [Fayyad 1998, Gray 1997]. The picture that is becoming 
increasingly common is depicted in Figure 1. In it, organizations or resourceful individuals 
provide services via a set of loosely-coupled workstation nodes. The service is usually 
some form of data-mining like searching, filtering, or image recognition. Clients, which 
could be machines running web browsers, not only initiate requests, but ... 
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Liqun Chen, Rainer Landfermann, Hans Lohr, Markus Rohe, Ahmad-Reza Sadeghi, Christian 
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Full text available: ff?| pdf(279 99 KB) Additional Information: full citation, abstract, references, index ter ms 

The Trusted Computing Group (TCG) has issued several specifications to enhance the 
architecture of common computing platforms by means of new functionalities, amongst 
others the (binary) attestation to verify the integrity of a (remote) computing 
platform/application. However, as pointed out recently, the binary attestation has some 
shortcomings, in particular when used for applications: First, it reveals information about 
the configuration of a platform (hardware and software) or application. T ... 

Keywords: TCG binary attestation, property-based attestation, security kernels, zero- 
knowledge proof of knowledge 
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Recently, many group communication services have become the focus for future 
developments in the Internet and wireless network applications, such as video- 
conferencing, collaborative work, networking games or online videos. In particular, these 
applications require data delivery from one sender to a large number of authorized 
receivers. Therefore, secure multicast communication will become an important 
networking issue in the future. Using a common encryption key only known by authorized 
members ... 
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This paper describes a novel approach to managing the evolution of distributed, persistent 
systems at run-time. This is achieved by partitioning a system into disjoint zones, each of 
which can be evolved without affecting code in any other. Contracts are defined between 
zones, making type-level interdependencies and inter-zone communication explicit. 
Programmer supplied code is added to the running system, at the boundary between 
zones, to constrain the sco ... 

15 Supporting dynamic data structures on distributed-memory machines | 
Anne Rogers, Martin C. Carlisle, John H. Reppy, Laurie J. Hendren 
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Volume 17 Issue 2 
Publisher: ACM Press 

Full text available- Wl pdf(2 05 MB) Additional Information: full citation , abstract , references , citings, index 
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Compiling for distributed-memory machines has been a very active research area in 
recent years. Much of this work has concentrated on programs that use arrays as their 
primary data structures. To date, little work has been done to address the problem of 
supporting programs that use pointer-based dynamic data structures. The techniques 
developed for supporting SPMD execution of array-based programs rely on the fact that 
arrays are statically defined and directly addressable. Recursive data s ... 

Keywords: dynamic data structures 
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Full text available: ^ pdf(344.77 KB ) Additional Information: full citation , abstract , referenc es, in dex te rms 

Adding security capabilities to shared, remote and untrusted storage file systems leads to 
performance degradation that limits their use. Public-key cryptographic primitives, widely 
used in such file systems, are known to have worse performance than their symmetric 




http://portal.acm.org/resultsxfm? 7/15/2007 



Results (page 1): migratable storage root key 



Page 6 of 7 



key counterparts. In this paper we examine design alternatives that avoid public-key 
cryptography operations to achieve better performance. We present the trade-offs and 
limitations that are introduced by these substitutions. 

Keywords: network attached storage, secure file systems 
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Farsite is a secure, scalable file system that logically functions as a centralized file server 
but is physically distributed among a set of untrusted computers. Farsite provides file 
availability and reliability through randomized replicated storage; it ensures the secrecy of 
file contents with cryptographic techniques; it maintains the integrity of file and directory 
data with a Byzantine-fault-tolerant protocol; it is designed to be scalable by using a 
distributed hint mechanism and delegatio ... 
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Archival storage of sensor data is necessary for applications that query, mine, and 
analyze such data for interesting features and trends. We argue that existing storage 
systems are designed primarily for flat hierarchies of homogeneous sensor nodes and do 
not fully exploit the multi-tier nature of emerging sensor networks, where an application 
can comprise tens of tethered proxies, each managing tens to hundreds of untethered 
sensors. We present TSAR, a fundamentally different storage ar ... 
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Modeling the storage structures of a DBMS is a prerequisite to understanding and 
optimizing database performance. Previously, such modeling was very difficult because 
the fundamental role of conceptual-to-internal mappings in DBMS implementations went 
unrecognized. In this paper we present a model of physical databases, called the 
transformation model, that makes conceptual-to-internal mappings explicit. By exposing 
such mappings, we show that it is possible to model the storage ... 
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A new file organization is proposed that combines the advantages of digital B-trees and 
extendible hashing methods into one organization that can be used universally. The 
method, like these predecessors, relies on digital searching. The key notions are: (i) that 
multipage nodes are addressed by the root and can have both data and index entries, the 
mix of entries changing over time; and (ii) that these nodes can be doubled with file 
growth and, when this occurs, data nodes at the next level oft ... 
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